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Abstract 

MA is a class of decision problems for which 'yes' -instances have a proof that can be efficiently 
checked by a classical randomized algorithm. We prove that MA has a natural complete problem 
which we call the stoquastic fc-SAT problem. This is a matrix-valued analogue of the satisfiability 
problem in which clauses are fc-qubit projectors with non-negative matrix elements, while a satisfying 
assignment is a vector that belongs to the space spanned by these projectors. Stoquastic /c-SAT is the 
first non-trivial example of a MA-complete problem. We also study the minimum eigenvalue problem 
for local stoquastic Hamiltonians that was introduced in Ref. fT|, stoquastic LH-MIN. A new com- 
plexity class StoqMA is introduced so that stoquastic LH-MIN is StoqMA-complete. We show that 
MA C StoqMA C SBP n QMA. Lastly, we consider the average LH-MIN problem for local stoquastic 
Hamiltonians that depend on a random or 'quenched disorder' parameter, stoquastic AV-LH-MIN. We 
prove that stoquastic AV-LH-MIN is contained in the complexity class AM, the class of decision prob- 
lems for which yes-instances have a randomized interactive proof with two-way communication between 
prover and verifier. 
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1 Introduction 



Recent years have seen the first steps in the development of a quantum or matrix- valued complexity theory. 
Such complexity theory is interesting for a variety of reasons. Firstly, as in the classical case it may increase 
our understanding of the power and limitations of quantum computation. Secondly, since quantum compu- 
tation is an extension of classical computation, this complexity theory provides a framework and new angle 
from which we can view classical computation. 

In this paper we will provide such a new point of view for the complexity class MA defined by Babai llJ. 
We do this by studying so-called stoquastic problems, first defined in HI. The first problem we consider 
is one that arises naturally through a quantum or matrix-valued generalization of the satisfiability problem 
|[3l . The input of quantum fc-SAT is a tuple (n, e, IIi, . . . , IlAf , 5*1, . . . , Sm), where n is a number of qubits, 
e > n^^^^^ is a precision parameter, and IIi, . . . , IIm are Hermitian projectors acting on the Hilbert space 
of n qubits. Each projector Ha acts non-trivially only on some subset of k qubits 5q, C {1, 2, . . . , n}. Then 
the promise problem quantum fc-SAT is stated as follows: 

• yes-instance: There exists a state 16*) G (C^)®" such that for all a = 1, . . . , M, 16*) = \9). 

• no-instance: For any state 16*) G (C^)*^" there is some a £ {1,... , M} such that {9\Ua\0) < 1 - e. 

(Here a state is a vector \9) G (C^)*^" with a unit norm {9\6) = 1.) A state \9) satisfying the condition for a 
yes-instance is called a solution, or a satisfying assignment. 

If the projectors Ha have zero off-diagonal elements in the computational basis, a solution \9) can always 
be chosen as a basis vector, \9) = \x), x G {0, 1}". In this case quantum /c-SAT reduces to classical A;-SAT 
which is known to be NP-complete for A; > 3. On the other hand, if no restrictions on the matrix elements 
of Ha are imposed, quantum A;-SAT is complete for Quantum MA, or QMA, defined by Kitaev ||6l [TOl if 
A; > 4, see ftl. The class QMA has been extensively studied in E ID 12 HOl HB IHl [El El [El. It was 
proved that quantum 2-SAT has an efficient classical algorithm [3l similar to classical 2-SAT. 

Let us now properly define the restriction that defines the stoquastic A;-SAT problem: 

Definition 1. Stoquastic k-SAT is defined as quantum k-SAT with the restriction that all projectors Ua have 
real non-negative matrix elements in the computational basis. 

The term 'stoquastic' was introduced in Ref. f\\ to suggest the relation both with stochastic processes 
and quantum operators. We will show that 

Theorem 1. Stoquastic k-SAT is contained in MA for any constant k and MA-hardfor k > 6. 

It follows that stoquastic 6-SAT is MA-complete. This is the first known example of a natural MA- 
complete problem. The proof of the theorem involves a novel polynomial-time random-walk-type algorithm 
that takes as input an instance of stoquastic fc-SAT and a binary string x G {0, 1}". The algorithm checks 
whether there exists a solution |^) having large enough overlap with the basis vector \x). Description of such 
a basis vector can serve as a proof that a solution exists. The proof of Theorem[I]is given in Section [BTTI 

Our second result concerns the complexity class AM (Arthur-Merlin games). AM is a class of deci- 
sion problems for which 'yes '-instances have a randomized interactive proof with a constant number of 
communication rounds between verifier Arthur and prover Merlin. By definition, MA C AM. It was 
shown that AM contains some group theoretic problems |2|, the graph non-isomorphism problem |[T6l 
and the approximate set size problem Q. We show that there exists an interesting quantum mechanical 
problem that is in AM (and in fact AM-complete). It is closely related to the minimum eigenvalue prob- 
lem for a local Hamiltonian ||6j| which we shall abbreviate as LH-MIN. The input of LH-MIN is a tuple 
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{n, Hi, . . . , H]\j, Si, ... , Sm, ^yes, ^no), where n is the total number of qubits, Ha is a Hermitian operator 
on n qubits acting non-trivially only on a subset of k qubits Sa ^ {1,2,..., n}, and Xyes < Xno are real 
numbers. It is required that \ \Ha\\ < n^^^^ and A„o — ^yes ^ n~^^^\ The promise problem LH-MIN is 
stated as follows: 

• yes-instance: There exists a state 16*) G (C^)®" such that Yla=ii^\^»\^) ^ ^yes- 

• no-instance: For any state \e) G (C^)^" one has T,a=i{^\Ha\0) > >>no- 

In other words, the minimum eigenvalue X{H) of a /c-local Hamiltonian H = J2a obeys \{H) < Xyes 
for yes-instances and X{H) > Xno for no-instances. 

LH-MIN for 2-local Hamiltonians can be viewed as the natural matrix- valued generalization of MAX2SAT 
which is the problem of determining the maximum number of satisfied clauses where each clause has two 
variables. It was shown in [6, 10] that LH-MIN is QMA-complete for k > 2. The authors in Ref. |[T1 
considered the LH-MIN problem for so-called stoquastic Hamiltonians. 

Definition 2. Stoquastic LH-MIN is defined as LH-MIN with the restriction that all operators H^ have real 
non-positive off-diagonal matrix elements in the computational basis. 

The important consequence of this restriction is that the eigenvector with lowest eigenvalue, also called 
the ground-state, of a Hamiltonian H = Ha is a vector with nonnegative coefficients in the compu- 
tational basis. This allows for an interpretation of this vector as a probability distribution. For a general 
Hamiltonian the ground-state is a vector with complex coefficients for which no such representation exists. 
Besides, stoquastic A;-SAT is a special case of /c-local stoquastic LH-MIN (choose 11^ as a projector onto 
the space on which H^ takes its smallest eigenvalue and choose Xyes = Aq). The authors in Ref. lUl 
have proved that (i) the complexity of stoquastic LH-MIN does not depend on the locality parameter k if 
k > 2; (ii) stoquastic LH-MIN is hard for MA; (iii) stoquastic LH-MIN is contained in any of the complex- 
ity classes QMA, AM, PostBPP (the latter inclusion was proved only for Hamiltonians with polynomial 
spectral gap), where PostBPP=BPPpath, see fTl[l8l. 

In the present paper we formulate a random stoquastic LH-MIN problem that we prove to be complete for 
the class AM. In fact the most interesting aspect of this result is that this problem is contained in AM, since 
it is not hard to formulate a complete problem for AM, see below. Let us define this problem stoquastic 
AV-LH-MIN properly. We consider an ensemble of local stoquastic Hamiltonians {H{r)} for which r is a 
string of m = n'^^^^ bits, and r is taken from the uniform distribution on S™. Such a random ensemble 
{H{r)} is called {k, /)-local if H{r) can be written as H{r) = ^^=1 Ha{r), M = n^'^^\ where Ha{r) 
is a Hermitian operator on n qubits acting non-trivially only on some subset of qubits Sa ^ {1, . . . , n}, 
\Sa\ < k. Furthermore, Ha{r) depends only on some subset of random bits Ra C {1, . . . , m}, \Ra\ < l- 
We will consider ensembles in which the Hamiltonians H{r) are stoquastic, i.e. each Ha{r) has real non- 
positive off-diagonal matrix elements for all r0. The input of the problem stoquastic AV-LH-MIN involves a 
description of a {k, /)-local stoquastic ensemble {H{r)} on n qubits and m random bits, and two thresholds 
^yes < \io- It is required that ||//a(r)|| < n*^(^) for all r, and Xno — ^yes > n^^^^\ Let us denote by 
A(r) the smallest eigenvalue of H{r) and A = 2"*" '^(^) average value of A(r). The stoquastic 

AV-LH-MIN problem is to decide whether A < Xyes (a yes-instance) or A > Xno (a no-instance). Our 
second result is 

Theorem 2. Stoquastic AV-LH-MIN is contained in AM. for any k,l = 0(1). Stoquastic {3,l)-local 
AV-LH-MIN is AM-complete. 

'Note that this property can be efficiently verified since we have to test only 2' random bit configurations. 
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The proof of the theorem is presented in Section [51 It should be mentioned that the stoquastic (3, 1)- 
local ensemble {H{r)} corresponding to AM-hard problem in Theorem |2] is actually an ensemble of 
classical 3-SAT problems, that is, for each random string r all operators Ha{r) in the decomposition 
H{r) = X^Q-ffo(r) are projectors diagonal in the computational basis. For yes-instance of the problem 
one has A(r) = for all r (and thus A = 0), while for no-instances A(r) = with probability at most 1/3 
(and thus A > 2/3), see Section [51 Since classical 3-SAT is a special case of stoquastic 3-SAT, we conclude 
that a (3, 1) -local ensemble of stoquastic 3-SAT problems also yields an AM-complete problem. 

Our final result concerns the complexity of stoquastic LH-MIN (without disorder). We define a new 
complexity class StoqMA which sits between MA and QMA and we prove, see Section [H that 

Theorem 3. Stoquastic k-local LH-MIN is SioqMK-complete for any k >2. 

The class StoqMA is a restricted version of QMA in which the verifier can perform only classical re- 
versible gates, prepare qubits in |0) and |+) states, and perform one measurement in the |+), |— ) basis. This 
results solves the open problem posed in [IJ concerning the complexity of stoquastic LH-MIN. We also 
establish some relations between StoqMA and already known complexity classes. Ref. [17] introduced a 
complexity class SBP (Small Bounded-Error Probability) as a natural class sitting between MA and AM. 
We prove that stoquastic LH-MIN and thus all of StoqMA is contained in SBP, see Section l4. l.ll for details. 
Figure [H illustrates the relevant complexity classes and their inter-relations. 




Figure 1: Inclusion tree for the relevant complexity classes. Here BPPpath=PostBPP. 

In conclusion, our results show that the randomized versions of stoquastic LH-MIN, stoquastic A;-SAT 
and classical A;-SAT are of equal complexity, that is they are all AM-complete. On the other hand, it is 
at present unclear whether the original problems (not randomized) A;-SAT, stoquastic fc-SAT and stoquastic 
LH-MIN and thus the corresponding classes NP, MA and StoqMA are of equal complexity. We would 
like to note that any proof of a separation between MA and AM (for example via a separation of MA and 
StoqMA) would have far-reaching consequences. Namely it was proved in [21 i that 

Theorem 4 (llll). //MA 7^ AM then NP ^ P/poly. 



2 Definitions of relevant complexity classes 

Throughout the paper and E* will denote a set of n-bit strings and the set of all finite bit strings respec- 
tively. 

Definition 3 (MA). A promise problem L = Lyes U Lno ^ E* belongs to MA iff there exist a polynomial 
p{n) and a BPP predicate V{x, w) such that 

X ^ Lyes =^ Pr[V{x,w) = l]>2/3 (Completeness) 

X G Lno =^ 'Pr[V{x,w) = 1] < 1/3 (Soundness) 
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Here x E S* represents the instance of a problem and w G S^^'^'^ represents the prover's witness string. 
If an instance x does not satisfy the promise, i.e., x ^ Lyes U Lno, then V{x, w) may be arbitrary (or even 
undefined). 

In m it was proved that MA has an ahemative quantum-mechanical definition as a restricted version of 
QMA in which the verifier is a coherent classical computer, see the review in Section IA3] of the Appendix. 
StoqMA is a class of decision problems for which the answer 'yes' has a short quantum certificate that can 
be efficiently checked by a stoquastic verifier. 

Definition 4 (StoqMA). A stoquastic verifier is a tuple V = (n, n^, no, n^, U), where n is the number of 
input bits, the number of input witness qubits, hq the number of input ancillas |0), the number of input 
ancillas |+) and U is a quantum circuit onn + riw + nQ + n_|_ qubits with X, CNOT, and Toffoli gates. The 
acceptance probability of a stoquastic verifier V on input string x G and witness state \ip) £ (([;;2^®nu, 
is defined as Pr(y; x, tp) = {il^in\U^ ^out C^l'i/'m)- Here \ipin) = \x) O ® |0)®'^o ® |+)«>"+ is the initial 
state and liout = |+)(+|i ® I else projects the first qubit onto the state \+). 

A promise problem L = Lyes U Lno ^ 5]* belongs to StoqMA iff there exists a uniform family of stoquastic 
verifiers, such that for any fixed number of input bits n the corresponding verifier V uses at most n^^^^ 
qubits, gates, and obeys completeness and soundness conditions: 

X G Lyes E (C^)'^^"- Pr{V;x,i{j) > eyes (Completeness) 

xeLno V|V') G (C^)®"- Pr{V;x,ip) < €no (Soundness) 

Here the threshold probabilities ^ < eno < ^yes < 1 must have polynomial separation: eyes — ^no ^ n~*^(^\ 

Comments: In contrast to the standard classes BPP, MA, or QMA the class StoqMA does not permit 
amplification of the gap between the threshold probabilities e«o, eyes based on majority voting. In fact, it is 
not hard to show that the state i\) maximizing the acceptance probability has non-negative amplitudes in the 
computational basis, and Pr(l/; x, V') G [^) 1] for ^riy non-negative state \'\\)). 

It is important to note that the only difference between StoqMA and MA is that a stoquastic verifier in 
StoqMA is allowed to do the final measurement in the {|+), |— )} basis, whereas a classical coherent verifier 
in MA can only do a measurement in the standard basis {|0), 

The complexity class AM was introduced by Babai |T| as a class of decision problems for which the 
answer 'yes' possesses a randomized interactive proof (Arthur-Merlin game) with two-way communication 
between a prover and a verifier. Babai also showed in lO that any language in AM has a proving protocol 
such that (i) verifier sends prover a uniform random bit string q; (ii) prover replies with a witness string w, 
(iii) verifier performs polynomial-time deterministic computation on q and w to decide whether he accepts 
the proof. Here is a formal definition: 

Definition 5 (AM). A promise problem L = Lyes U Lno ^ 5]* belongs to the class AM iff there exists a 
polynomial p and a P predicate V{x, q, w) defined for any q,w €z S^d^'D, such that 

X G Lyes =^ Pr[3u; : V{x,q,w) = 1] > 2/3 (Completeness) 
X G Lno =^ Pr[3w : V{x,q,w) = 1] < 1/3 (Soundness) 

where q G S^^^l) is a uniformly distributed random bit string. 

Finally, the complexity class SBP (Small Bounded-error Probability) was introduced in [17] as a natural 
class sitting between MA and AM. 
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Deflnition 6 (SBP). A promise problem L = Lyes U Lno ^ 5]* belongs to the class SBP iff there exists a 
function F £ and a function / : S* ^ M_|_ computable in polynomial time such that 

X G Lyes =^ F{x) > f{x) (Completeness) 
X e Lno =^ F{x) < (1/2) f{x) (Soundness) 

It was proved in HH that SBP C AM n BPPpath, where BPPpath = PostBPP, see [1]. 

3 Stoquastic 6-SAT is MA-complete 

We first argue that stoquastic /c-SAT is MA-hard for any A: > 6. This result is a simple corollary of Lemma 3 
in Ref. [T] which showed that LH-MIN for a 6-local stoquastic Hamiltonian is MA-hard (a more formal 
proof of this result is also given in Appendix IA.3I ). Indeed, let L = Lyes U Lno be any language in MA and 
let F be a verifier for this language, see Definition [3l Without loss of generality V accepts with probability 
1 on 'yes'-instances, see ifTOll . As was shown in Ref. [Ij, for every input x G L one can construct a 
stoquastic 6-local Hamiltonian H = J2a such that X{H) = Xyes = J2a ^i^a) for x G Lyes and 
\{H) > Xno = Xyes + for x G Lno- The corresponding LH-MIN problem is thus equivalent 

to quantum 6-SAT with projectors IIq, projecting onto the ground-space of Ha- Such a projector has non- 
negative matrix elements because Ha has non-positive off-diagonal matrix elements. Therefore any problem 
in MA can be reduced to stoquastic 6-SAT: 

Corollary 1, Stoquastic 6-SAT is MA-hard. 
3.1 Stoquastic k-SAT is contained in MA 

In this section we describe a random-walk-type algorithm for stoquastic /c-SAT. Given an instance of sto- 
quastic fc-SAT with the projectors {Ha} we can define a Hermitian operator 

1 ^ 

G = -En.. (1) 

Note also that G has non-negative matrix elements in the computational basis. We have that either the largest 
eigenvalue of G is A = 1 (a yes-instance) or A < 1 — eM~^ (a no-instance) since for any vector \9) 

{9\G\e) < 1 - M'^ + M'^ min(6l|n„|6l) < 1 - eAf~\ 

a 

In order to distinguish A = 1 and A < 1 — eM^^ the verifier Arthur will employ a random walk on the 
space of n-bit binary strings. The transition probability from a string x to a string y will be proportional to 
the matrix element G^^y- The role of the prover Merlin is to provide the starting point for the random walk. 
Each step of the random walk will include a series of tests that are always passed for positive instances. For 
negative instances the tests are passed with probability strictly less than 1 such that the probability for the 
random walk to make L steps decreases exponentially with L. 

In order to illustrate the main idea, we will first define the walk for positive instances only. Suppose that 
a state 

\e) = Y,^x\x), 9,,>o, rcE" (2) 



5 



is a satisfying assignment, that is IIq, \d) = \9) for all a. For any binary strings x,y £T define a transition 
probability from x to y as 



Px^y = G^,y\^fy G^,y = {x\G\y). (3) 

Clearly, Yly&T Px~^y = 1 for all x G T, so that Px~*y defines a random walk on T. A specific feature of 
solutions of stoquastic A;-SAT is that the ratio 9y/0x in Eq. ^ can be easily expressed in terms of matrix 
elements of 11^, namely one can prove that 

Lemma 1. Assume 11 : C^" C"^" is a Hermitian projector having non-negative matrix elements in the 
computational basis. Assume H\6) = \6) for some state \9) = "^x^T \ 6x > 0, T C S". Then 

(1) {x\U\x) > Oforallxe T, 

(2) If {x\Il\y) > for some x,y £ T then 

ft I /,,inU/\ 

(4) 

The proof of this lemma can be found in Appendix lA.il Applying the lemma to Eq. ([3]l we conclude that 
either Gx,y = Px^y = or Gx,y > and thus 




_ l {y\^a\y) ... 

for any a such that (y|nQ,|x) > (since Gx,y > there must exist at least one such a). Thus for any fixed 
X, y G r we can compute the transition probability Px^y efficiently. Let, for any fixed x S T, the set of 
points y that can be reached from x by one step of the random walk be A^(x) = {y e S" : Gx,y > 0}. 
This set contains at most 2*^ M = nP^^^ elements which can be found efficiently since G is a sum of /c-qubit 
operators. 

Note that definition of transition probabilities Eq. ([5]) does not explicitly include any information about 
the solution 16*). This is exactly the property we are looking for: the definition of the random walk must 
be the same for positive and negative instances. Of course, applying Eq. ^ to negative instances may 
produce unnormalized probabilities, such that X]j/GAf(x) Px^y is either smaller or greater than 1. Checking 
normalization of the transition probabilities will be included into the definition of the verifier's protocol as 
an extra test. Whenever the verifier observes unnormalized probabilities, he terminates the random walk and 
outputs 'reject'. The probability of passing the tests will be related to the largest eigenvalue of G. If the 
verifier performs sufficiently many steps of the walk and all the tests are passed, he gains confidence that the 
largest eigenvalue of G is 1. We shall see that the soundness condition in Eq. ^ is fulfilled if the verifier 
accepts after making L steps of the random walk, where L obeys inequality 

n / e \ ^ 1 
22(1- — ) <-. (6) 

Since e = n"*^*^^) and the number of clauses M is at most M < (^) = rP^^^ one can satisfy this inequality 
with a polynomial number of steps, L = n*^*^^^. The only step in the definition of the random walk above 
that can not be done efficiently is choosing the starting point. It requires the prover's assistance. For reasons 



^We can always choose a satisfying assignment witli non-negative amplitudes. Indeed, assume Ha \0) — \6) for some \9) — 



Y^^e^ \x). Define l^) = Y.:c l^^l 1^)- Then {e\na\e) > {e\Ua\9) = 1 and thus Ha 
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related to the soundness of the proof, the prover is required to send the verifier a string x E T with the 
largest amplitude O^. 

A formal description of the prover's strategy is the following. In case of a yes-instance the prover chooses 
a vector \6) G (C^)*^" such that Ha \6) = \6) for all a. Wlog, 16*) has positive amplitudes on some set 
T C S", see Eq. (|2]l. The prover sends the verifier a string w ^ T such that 9^ > 9x for all x G T. In case 
of a no-instance the prover may send the verifier an arbitrary string w G S". 

Here is a formal description of the verifier's strategy: 



Step 1: Receive a string w G S"' from the prover. Set xq = w. 

Step 2: Suppose the current state of the walk is xj. Verify that {xj\Ila\xj) > for all 

a. Otherwise reject. 
Step 3: Find the set N{xj) = {y G : G^.^y > 0}. 

Step 4: For every y G N{xj) choose any a = a{y) such that {y\Iia{y)\x j) > 0. 
Step 5: For every y G N{xj) compute a number 



{y\^a(y)\y) 



Pxj^y — Gxj^y \l I iT-r I \- (7) 



Step 6: Verify that ) Pxj-^y = 1- Otherwise reject. 

Step 7: Uj = L goto Step 10. 

Step 8: Generate xj^i G N{xj) according to the transition probabilities P^ ^x +i- 
Step 9: Compute and store a number 

r,+i = :|i^fi±i. (8) 

Set j ^ j + 1 and goto Step 2. 
Step 10: Verify that 11^=1 O ^ 1- Otherwise reject. 
Step 11: Accept. 



Step 4 deserves a comment. It may happen that there are several a's with the property {y\Iia_\xj) > 0. 
Let us agree that a{y) is the smallest a satisfying this inequality. In fact, the definition of the transition 
probabilities Px ^y should not depend on the choice of a{y) for the yes-instances, see Lemma[T] Step 8 
might be impossible to implement exactly when only unbiased random coins are available. This step can be 
replaced by generating x^+i from a probability distribution P'x^-^y which is (5-close in variation distance to 
Pxj^y for some 5 = n~^^^\ This is always possible even with unbiased random coins. 

In Appendix IA.2I we formally prove the completeness and soundness of this protocol. As a consequence 
of this and Corollary [T] we obtain Theorem [T] 



4 Stoquastic LH-MIN is StoqMA-complete 

In this section we will prove Theorem [3] 

First we show that stoquastic LH-MIN is contained in StoqMA. Let i7 be a stoquastic A;-local Hamilto- 
nian acting on n qubits. It is enough to show that there exist constants a > 0, /3, and a stoquastic verifier V 
with riyj = n witness qubits, such that 

Pr(l^; X, i)) = (V'l i-aH + P I) li/j) for all G (C^)®"™ , (9) 
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where x is a classical description of H. We shall construct a stoquastic verifier that picks up one local term 
in H at random and converts this term into an observable proportional to |+)(+|. This is possible for one 
particular decomposition of H into local stoquastic terms which we shall describe now. 

Lemma 2. Let H be k-local stoquastic Hamiltonian on n qubits. There exist constants 7 > and (3 such 
that 

jH + pi = Y,PjUjHjU], (10) 

j 

where pj > 0, pj = 1, Uj is a quantum circuit on n qubits with X and CNOT gates. The stoquastic 
term Hj is either — 10)(0|®'^ or —X (g) |0)(0|®^~^. All terms in the decomposition Eq. f liOl ) can be found 
efficiently. 

The next step is to reduce a measurement of the observables |0)(0|'^^ and X ® |0)(0|'^^~^ to a measure- 
ment of X only. 

Lemma 3. An operator W : (C^)®^ (C^)®*? is called a stoquastic isometry iff 

W\i>) = U |0)®"° ® 1+)®"+ for all |V) G (C^)^^ 

for some integers uq and n+, q = p + uq + n+, and some quantum circuit U on q qubits with X, CNOT, 
and Toffoli gates. For any integer k there exist a stoquastic isometry W mapping k qubits to 2k + 1 qubits 
such that 

\0){0\^'' = W^ (^X^I^^^^W. (11) 
Also, for any integer k there exist a stoquastic isometry W mapping k qubits to 2k — 1 qubits such that 

X |0)(0|®^-^ = W^ (^X(S) /^2fc-2^ (^2) 

The proof of these Lemmas can be found in Appendix IA.4I Combining Lemmas |2] and [3] we get 

jH + pI = -J2PjW^{X0l,ise)Wj, (13) 

j 

where {Wj} is a family of stoquastic isometrics. Clearly, for every term in the sum Eq. ([T3] ) one can 
construct a stoquastic verifier Vj such that 

Pr{Vj;X,i>) = {i:\W^{\+){+\0lelse)Wj\^P). 

Here x is a classical description of H. Taking into account that X = 2 |+) (+| — /, we get 

(^|(-(7/2) /7 + (1 - /3)/2/)|^) = Pr(y,-;x, V). 

j 

It remains to note that the set of stoquastic verifiers is a convex set. Indeed, let V and V" be stoquastic 
verifiers with the same number of input qubits and witness qubits. Consider a new verifier V such that 

Pr{V; X, ^) = (1/2) Pr(V'; x, ^) + (1/2) Pr{V"; x, -0). 

Using one extra ancilla |+) to simulate a random choice of V' or V", and controlled classical circuits one 
can easily show that V is also a stoquastic verifier. Thus we have shown how to construct a stoquastic 
verifier satisfying Eq. Q. 
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4.1 Stoquastic LH-MIN is StoqMA-hard and contained in SBP 



In order to prove that stoquastic LH-MIN is hard for StoqMA, we could try to modify the MA-hardness 
result of stoquastic LH-MIN obtained in Ref. [IJ. However Kitaev's circuit-to-Hamiltonian construction 
requires a large gap between the acceptance probabilities for yes versus no-instances (which is achievable in 
MA or QMA because of amplification) in order for the corresponding eigenvalues of the Hamiltonian to be 
sufficiently separated. In StoqMA we have no amplification which implies that a modified construction is 
needed. This modified construction in which we add the final measurement constraint as a small perturbation 
to the circuit Hamiltonian, is introduced in Appendix IA.3I We show there that for any stoquastic verifier V 
with L gates and for any precision parameter 6 <^ l/L"^ one can define a stoquastic 6-local Hamiltonian H, 
see Eqs. (I18I20I21I) . such that its smallest eigenvalue X{H) equals 

X{H) = 6{L + 1)-^ (^1 -maxPr(y;?/^,x)^ +0(5^). 

Neglecting the term 0(5^) (since 6 can be chosen arbitrarily small as long as 6 = n^'^^^)), we get 

yes-instance: A(i7) < Xyes = S{1 — eyes){L + 
no-instance: A(^) > Xno = ^{^ — ^no){L + l)^^ 

Since eyes — ^no = n~^^^\ we conclude that Xno — Xyes = n~'-'^^\ Thus stoquastic 6-local LH-MIN is 
StoqMA-hard. It remains to note that the complexity of stoquastic /c-local LH-MIN does not depend on k 
(as long as A; > 2), see HI. 

4.1.1 Containment in SBP 

We can prove that stoquastic LH-MIN and thus all of StoqMA is contained in the class SBP. Our proof is 
essentially a straightforward application of the result in Ref. [1] which showed that stoquastic LH-MIN was 
contained in AM. We will only sketch the ideas of the proof here. Given a stoquastic local Hamiltonian H 
we can define a non-negative matrix G = ^{I — H/p{n)) for some polynomial p{n) such that all matrix 
elements < Gx,y < 1. If we define fiyes = ^{1 — Xyes/pin)), fino = ^{I — Xno/pin)), and denote /u(G) 
the largest eigenvalue of G, then for any integer L one has 

X{H) < Xyes /"(G) > f^yes ^ Tr(G^) > (fXyes)'' 

(14) 

X{H)>Xno KG)<fino Tr(G^) < 2" (/i„o)^. 

In Ref. IT] it was shown that Tr(G^) can be written as Tr(G^) = YlseT,("^+")'- ^g{s) where Fq ■ 
j^{m+n)L _> 5] is a polynomial-time computable Boolean function and m is the number of bits needed to 
write down a matrix element of G. Now one can define a #P function F{x) such that x is a description 
of G (or, equivalently, of H) and F{x) = J2s^g(^)- Accordingly, F{x) > 2"^^{fiyes)^ if x describes 
a yes-instance of LH-MIN and F{x) < 2'"^2"(/Uno)^ if x describes a no-instance. Choosing sufficiently 
large L = n'^(^) such that 2" {^ino)^ < (1/2) ifJ-yes)'^ and defining g{x) = 2'^^{^yes)^ one can satisfy the 
completeness and soundness conditions in Def. |6] This implies that 

Theorem 1. StoqMA C SBP. 
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5 Stoquastic AV-LH-MIN is AM-compIete 



We will firstly prove that stoquastic AV-LH-MIN is in AM. We are given a {k, /)-local stoquastic ensem- 
ble {H{r)}, where H{r) acts on n qubits and depends on m random bits r € S™. We are promised 
that A < Xyes for positive instances and A > Xno for negative instances. The first step is to use many 
independent replicas of the ensemble {H{r)} to make the standard deviation of A(r) much smaller than 
the gap Xno — ^yes- More strictly, let us define a new (fc, /) -local stoquastic ensemble {H'{r')}, where 
r' = {r^^\ . . . , A^^) G contains independent samples of the random string r, and 

1 ^ 

Here the total number of qubits is nN and H^^\A^'>) is the original Hamiltonian H{A^^) applied to the 
j-th repUca of the original system. Let A'(r') be the smallest eigenvalue of H'{r'), X! be the mean value of 
A'(r'), and (t(A') be the standard deviation of A'(r'). Clearly, 

A' = A, and cj{X') - ""^^^ 



N 

where cr(A) is the standard deviation of A(r). Since all Hamiltonians H{r) are sums of local terms with 
norm bounded by n'^(^), we have (7(A) = n'^(^). Therefore we can choose A^ = n'^(^) such that, say, 
a(A') < (1/100) {Xno - \yes). 

Now let us choose A^g^ = Xyes + 10(t(A') and X'no = ^no — 10(t(A'). Then we still have X'no — 
X'yes > n^'^(^) and Chebyshev's inequality implies that Pr[A'(r') < A^g^.] > 99/100 for a yes-instance, 
whereas Pr[A'(r') > X'no] ^ 99/100 for a no-instance. Now we can use the fact that stoquastic LH-MIN 
is contained in AM, see Jl]. Namely, in order to verify that A < Xyes the verifier chooses a random r' and 
then directly follows the proving protocol of [T| to determine whether A'(r') < X'ygg. Since a randomly 
chosen Hamiltonian H'{r') satisfies the promise for stoquastic LH-MIN with probability at least 0.99, it 
will increase the completeness and soundness errors of the protocol HI at most by 1/100, which is enough 
to argue that stoquastic AV-LH-MIN belongs to AM. 

It remains to prove that stoquastic (3, l)-local AV-LH-MIN is AM-hard. Let L = Lyes U Lno be any 
language in AM. As was shown by Purer et al fT9|, definitions of AM with a constant completeness error 
and with zero completeness error are equivalent. Thus we can assume that the P-predicate V{x, q, w) 
from Definition H] has the following properties: x G Lyes implies 'iq3w : V{x,q,w) = 1, while x S 
Lno implies Pr[3?x; : V{x,q,w) = 1] < 1/3. Using an auxiliary binary string z of length jxl'^^^) one 
can apply the standard Cook-Levin reduction to construct a 3-CNF formula C{x, q, w, z) such that (3 w : 
V{x, q, w) = 1) iff {3w, z : C{x, q, w, z) = 1). Moreover, w.l.o.g. we can assume that each clause 
in C depends on at most one bit of q (otherwise, add an extra clause to C that copies a bit of q into 
an auxiliary bit). Therefore x G Lyes implies 'iq3w,z : C{x,q,w, z) = 1, while x G Lno implies 
Pr[3 w, z : C{x, q, w,z) = 1] < 1/3. For any fixed strings x and q one can regard C{x, q, w, z) as a 3- 
CNF formula with respect to w and z, i.e. C{x, q, w, z) = Ci{w, z) A ... A Cm{w, z). The minimal number 
of unsatisfied clauses in C{x,q,w, z) can be represented as the minimal eigenvalue of a classical 3-local 
Hamiltonian H{x,q) depending on x and q which acts on the Hilbert space spanned by basis vectors w 
and z, namely H{x, q) = Y.a=i Y.w,zi~^ Ca{w, z))\w, z){w, z\. Setting Xyes = and Xno = 1 we get an 
instance of (3, l)-local AV-LH-MIN such that A = for x G Lyes and A > 2/3 for x G Lno- 
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A Appendix 

A.l Proof of Lemma [1] 

Let us start by giving a simple characterization of non-negative projectors. 

Proposition 1. Let 11 : be Hermitian projector (i.e. 11^ = 11 and 11^ = Ilj with non-negative 

matrix elements, {x\Il\y) > 0, 1 < x,y < N. There exist q = Rank(n) states ■ ■ ■ , IV'g) ^ such 
that 

1. {x\'il)j) > Ofor all X and j, 

2- {'il^j\ilJk) = ^j,kforall j,k, 

3- n = E,'=ilV',)(V',|. 

Note that non-negative states are pairwise orthogonal iff they have support on non-overlapping subsets of 
basis vectors. Thus the proposition says that non-negative Hermitian projectors are block-diagonal (up to 
permutation of basis vectors) with each block being a projector onto a non-negative pure state. 

Proof. For any basis vector \x) define a "connected component" 

T^ = {y : {x\Ii\y) > 0}. 

(Some of the sets may be empty.) For any triple x, y, z the inequalities (j;|n|y) > 0, (y|n|2;) > imply 
(x|n|z) > since 

{x\U\z) = (xln^lz) = '^{x\U\u){u\U\z) > {x\U\y){y\U\z) > 0. 

u 

Therefore the property (2;|n|y) > defines a symmetric, transitive relation on the set of basis vectors and 
we have 

• y imphes Ty = T^, 

• y imphes Ty n = 0. 

Consider a subspace H{Tx) ^ spanned by the basis vectors from Tx. Clearly 7{{Tx) is Il-invariant. 
Thus n is block diagonal w.r.t. decomposition of the whole Hilbert space into the direct sum of spaces 
H{Tx) and the orthogonal complement where 11 is zero. Moreover, the restriction of 11 onto any non-zero 
subspace TL{Tx) is a projector with strictly positive entries. According to the Perron-Frobenius theorem, the 
largest eigenvalue of a Hermitian operator with positive entries is non-degenerate. Thus each block of 11 has 
rank 1, since a projector has eigenvalues 0, 1 only. □ 

Now we can easily prove LemmaHl 
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Proof of LemmaUl The statement (1) can be proved by contradiction. Assume x E T and (j;|n|x) = 0. 
Then 11 |x) = and thus 9^ = {x\6) = {x\Il\9) = which is a contradiction since > for all x G T. 
The statement (2) follows from the proposition above. Consider a decomposition of 11 into non-negative 
pairwise orthogonal one-dimensional projectors: 

Q 

n = 5^lV'j)(V'jl, g = Rank(n). 
i=i 

The condition (a:|n|?/) > implies that x and y belong to the same rank-one block of 11, that is 

n \x) = ii^jix) = \/(x|n|x) 1^,) 

for some block j. Now we have 

= {x\e) = {x\u\e) = y^{x\u\x) 

9y = {y\9) = {y\U\9) = y^W\y) ii^jlO) 
Both 9x, 9y are positive since we assumed x,y e T, so 

9y^ l {y\U\y) 
9^ ^ {x\U\x)' 

□ 



A.2 Completeness and Soundness of the MA-verifier Protocol 
A.2.1 Completeness 

Consider a yes-instance with a satisfying assignment \9), see Eq. Q. We assume that the prover is honest, 
so that the verifier receives a string w ^ T with the largest amplitude 0^ > 9x for all x G T. We will prove 
that the verifier will make L steps of the random walk passing all the tests with probability 1. 

Indeed, suppose that the current state of the walk is xj G T. The test at Step 2 will be passed because of 
Lemma[Il part (1). Step 3 is well-defined because the set N{xj) is non-empty (xj itself belongs to N{xj) 
since Step 2 implies Gx ^x > 0), the size of N{xj) is at most = n'^(^) and all elements of N{xj) can 
be found efficiently. Besides we have the inclusion N{xj) C T. Indeed, for any y G N{xj) one has 

9y = {y\9) = {y\G\9) = ^{y\G\z){z\9) > Gy^xfi., > 0, 

since xj G T, Gy^x > 0, and all matrix elements of G are non-negative. Therefore y £ T. Step 4 is 
well-defined since Gy^xj > implies {y\Ila\xj) > for some a. For any y G N{xj) the number Pxj^y in 
Eq. (O is well-defined since (xj|n^(j^)|xj) > 0, see Step 2. According to Lemma[T] part (2), the number 
Pxj^y defined by Eq. dTJl coincides with 

P -r ( ^ 

Therefore 

E Px^^y = EP^.-y = ^- 

yeN(x,) yeT 
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and the test at Step 6 will be passed. Step 8 is well-defined in the approximate settings: generate y G N{xj) 
according to probability distribution P'x^^y such that WP^^^y — P'^.—^yWi < 5, 5 = n"*^^^^. Step 9 is well- 
defined since Xj+i G N{xj) and thus Gx ,x +i > 0. Summarizing, the random walk will make L steps with 
probability 1. 

As for the last test at Step 10, note that 




see Lemma[T] part (2). Taking into account that 9^ > Ox for all x ^T, one can see that n^Li rj < 1 for all 
possible xi ^ T and thus Step 10 will be passed. Thus the verifier always accepts on positive instances. 



A.2.2 Soundness 

Suppose the protocol is applied to a no-instance. Let us first discuss the case when Step 8 is implemented 
exactly. An approximate implementation will require only a minor modification. 

Let us say that a string x G is acceptable iff it passes the tests at Step 2 and Step 6 of the verifier's 
protocol. In other words, x is acceptable iff 

1. (xIIIqIx) > for all a, 

2- Px^y = 1- 

Here N{x) = {y G : Gx,y > 0} and Px^y is defined by Eq. © with Xj = x. Denote Tacc ^ the 
set of all acceptable strings (it may happen that Tacc = 0)- 

Clearly, the verifier rejects unless the prover's witness w is acceptable. Thus we can assume that the 
random walk starts from xq G Tacc- If the current state xj of the random walk is an acceptable string, 
the probability distribution Px^^y on the set y G N{xj) is well-defined. However, in general N{xj) is 
not contained in Tacc, so the random walk can leave the set Tacc with non-zero probability. Clearly, the 
probability for the random walk starting from xq G Tacc to stay in Tacc at every step j = 1, 2, . . . , L is 

Pr (RW stays in Tacc) = ^ Pxo^xi Pxi^x2 ■ ■ ■ Px^-i^x^ ■ 

3; 1 , . . . , X ^ G 7a cc 

Taking into account Eq. (H) one gets 



Pr (RW stays in Tacc) — j ]^ rj j Gxq,xi Gxi,x2 ' ' ' Gx 

Xl,...,XLe:Tacc \i = l 



At this point we employ the test at Step 10. Indeed, the verifier accepts iff the random walk stays in Tacc 
at every step j = 1, . . . ,L and Y[j=i '^j — 1- Thus the probability for the verifier to accept on an input 
w = xq ^ Tacc can be bounded from above as 

Pr (the verifier accepts on xq) < ^ Gxo,xi Gx,,x2 ■ ■ ■ Gxl-i,xl- 

Taking into account that all matrix elements of G are non-negative, we get 

Pr (the verifier accepts on xq) < ^ Gx^^xi ■ ■ ■ Gxi^_^,xl = 2 2 (xo|G'^|+), 

a;i,...,a;ieS" 
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where |+) = 2 "/^ XIxgS" I^) uniform superposition of all 2" basis vectors. For negative instances 
the largest eigenvalue of G is bounded from above by 1 — e/M and thus (xo|G^|+) < (1 — e/M)^ and 



Pr (the verifier accepts on xq) < 2 2 ( 1 



M) - 3 

Now suppose that Step 8 is implemented using a probability distribution P,^.^y, such that 



y£N{xj) 

One can easily verify that Eq. (031 ) implies 



- P' 



< 6 for any Xj G Tacc- 



(15) 



^1 V -i^L^Tacc 



- P' P' 



P' 



< L5. 



Thus using an approximate probability distribution at Step 8 leads to corrections of order L6 to the overall 
acceptance probability. Choosing 6 <ti L^^ we can get an acceptance probability smaller than 1/2 which 
can be amplified to 1/3 using standard majority voting. 



A.3 Coherent classical verifiers, stoquastic verifiers, and circuit Hamiltonians 

In this section Kitaev's circuit Hamiltonian construction lH is applied to stoquastic verifiers, see Def.|4] It is 
the main technical element of all the hardness results in our paper. Specifically, it is used in Subsection 14.11 
to prove that stoquastic LH-MIN is hard for StoqMA. Finally, we use a coherent description of MA, see [IJ, 
to show that stoquastic 6-SAT is hard for MA, see Subsection IA.3.41 



A.3.1 Coherent description of MA 

Definition 7. A coherent classical verifier is a tuple V = (n, n^o, no, n+, U), where 

n = number of input bits , 

Uyj = number of witness qubits, 

uq = number of ancillas \0) , 

n+ = number of ancillas \+) , 

U = quantum circuit onn + n^, + no + n+ qubits with X, CNOT, and Toffoli gates 

The acceptance probability of a coherent classical verifier V on an input string x G S " and witness state 
IV^) G (C2)®"- is defined as 

Vr{V-X,i:) = {ll,in\U^IioutU\iJin), 

where \ipin) = \x) ® 10)®*^° |+)®"+ is the initial state and Hout = |0) (0|i (g) leise projects the first 
qubit onto the state |0). 

Lemma 4 (Llj). A promise problem L = Lyes U Lno ^ belongs to MA iff there exists a uniform family 
of coherent classical verifiers, such that for any fixed number of input bits n the corresponding verifier V 
uses at most rP^^^ qubits, n'^^^-* gates, and obeys completeness and soundness conditions: 

X E Lyes 31-0) G (C^)®"- Pr{V;x,i') = 1 (Completeness) 

xeLno VIV') G (C^)®""" Pr(F;a;,^/') < 1/3 (Soundness). 
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A.3.2 The circuit Hamiltonian 



Let V = (n, 71^, no, [/) be a coherent classical verifier or stoquastic verifier, where the circuit U consists 
of L gates, [/ = • • • C/2 f/i. Denote iV = n+n^+no+n++L+2. Define a linear subspace H C (C^)®^ 
such that 



n 



1$) = ^Uj---Uo \x) IV') |0)®"» 1+)®"+ IP+^O^-^'+i), IV') G (C^)®"- )> , (16) 

j=0 



where x is some fixed input string and Uq = I. States from H represent computational paths of the verifier's 
quantum computer starting from an arbitrary witness state Itjj). For any fixed |^) all L + 1 computational 
states along the path starting from lip) are taken in a superposition and 'labeled' by pairwise orthogonal 
'clock states' |l-'+^0^^-^+^), j = 0, . . . , L. It is convenient to label the clock qubits by j = 0, . . . , L + 1. 
Note that the clock qubit is always set to 1, while the clock qubit L + 1 is always set to 0. For any 
j = 1, . . . , L, the clock qubit j is a flag telling whether the gate Uj has or has not been applied. 

Let us show that H is spanned by solutions of a stoquastic 6-S AT problem. Introduce non-negative 3-qubit 
projectors 



nf^*^' = \Xj){Xj\^nputj ^ miWUck 0,1 + 

init 
j 

init 



UfitO^ \0){OUcillao j ^ \10) {WUck 0,1 + 1 11) (11 



Iciocfe 0,1 1 


j 


= 1,. 


. ,n, 


clock 0,1 1 


3 -- 


= 1,.. 




1 clock 0,1 ) 


j 


= 1,. 


. . ,n+ 



Uf''+ = \+){ + \ancma+j ® \W){10Uck 0,1 + |11)(11 

Here we used the labels input, ancillao, ancillaj^, clock to label the subsets of input qubits, ancillas |0), 
ancillas |+), and clock qubits respectively. Also Xj stands for the j-th bit of the string x. States invariant 
under the projectors above satisfy correct initial conditions. 
Introduce non-negative 6-qubit projectors 



^ ' 2 



;^|1)(1| clock j — |1)(1| clock j + |0)(0| clock j 
+|1)(0| clock j 

(8) Uj + \0){l\clock j <^ (g) \0){0\clock j + 1 

+ \000){OOOUckj-i,j,j+i + |lll)(lll|docfc j-i,i,j+i (17) 

where j = I, . . . , L. States invariant under the projectors above obey the correct propagation rules relating 
computational states at different time steps. Therefore we arrive at 



n 



||$) G (C2)®^ : n;™* ^ 1$) = nj™* ^\^) = nj™* + l^*) = Uf^ \^) = |$) for all j} . 



Now we can define a circuit Hamiltonian 

n no L 

= ^(/ _ n;."* + - n;™* °) + ^(/ - nf ^* +) + - uf°p). (is) 
j=i j=i j=i j=i 

Lemma 5. The smallest eigenvalue of the circuit Hamiltonian H^^^ in Eq. di^l ) is 0. The corresponding 
eigenspace coincides with H, see Eq. f l76l ). The second smallest eigenvalue ofH^^^ is A = i}{L~^). 
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Proof. The first part of the lemma follows directly from the definition of Ti. The analysis performed in ||6l 
shows that the spectrum of H^^^ does not depend on the circuit U. Thus one can compute the spectral gap of 
(6) by considering a trivial circuit composed of identity gates, Uj = I. For the trivial circuit one can ignore 
the witness qubits since H'^^'> does not act on them. Besides, one can consider only one type of ancillas, 
say |0), because by conjugating ff(^) with unitary Hadamard operators we can convert |+) ancillas to |0) 
ancillas. By similar arguments, we can assume that \x) = |0"). Then we apply the result of Lemma 3.11 for 
s = 1 in Ref. [20,1 which shows that Kitaev's circuit Hamiltonian corresponding to a quantum circuit has a 
spectral gap A = 0(L~^). □ 



A.3.3 Converting stoquastic and coherent classical verifiers to a stoquastic Hamiltonian 

This section describes the final step in converting a stoquastic or a coherent classical verifier to a stoquastic 
Hamiltonian, namely how to represent the final measurement in the circuit. The construction that we present 
here is different from the standard one in [6]. The reason for this modification is that the decision thresholds 
in StoqMA cannot be amplified and therefore the standard construction would fail. 

Let V = {n, n^u, no, n+, U) be a stoquastic or a coherent classical verifier, where the circuit U consists 
of L gates, U = Ul • ■ • U2 U\. Define a 3-qubit non-negative projector 

clock L,L+1- 

Here the projector Hout corresponds to the final measurement performed by the verifier V, see Def. |4]and 
Def. |7J Let |<I>) G H be a normalized state representing a computational path starting from a witness state 
IV') G (C^)®"™, and some input string x G S", see Eq. ([T6l ). One can easily check that 

jjmea.|^^ = 1 _ [1 _ Pr{V; ^J, x)] . (19) 

Thus the subspace H contains a state invariant under n™'^"'' iff PriV; Tp,x) = 1 for some witness state |^). 
Let H^^^ be the clock Hamiltonian associated with V, see Eq. dTS] ). Define a new Hamiltonian 

H = H^^^ +6{I -W^^"'), 0<5«A. (20) 

Let X{H) be the smallest eigenvalue of H. Considering 5 {I — n*"^"*) as a small perturbation, we can 
compute X{H) as 

X(H) = 6 mill UUI - U^'^'^'M) + 0(6^). 

\4')£H 

Taking into account Eq. dlQl l one gets 

A(^) = --^ ( 1 -maxPr(y;V',x) ) +0((52). (21) 

According to Lemma[5] H^^^ has a spectral gap A = Thus the applicability of the perturbative 

approach, ^ A, can be ensured by choosing 5 <^ L^'^. 

A.3.4 Stoquastic 6-SAT is hard for MA 

We can define an instance of stoquastic 6-SAT with a set of projectors 
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The total number of projectors in 5 is M = n + no + n+ + L + l = n^^^\ If x is yes-instance, then 
Pr(y; tl;,x) = I for some witness state \ip), see LemmalU and thus the set of projectors S has a common 
invariant state. If x is no-instance, then for any state |$) G (C^)®^ there exists a projector 11 G 5 such that 

(^>|(/-n)|^>) > mm{l,d-^} {<^>\H\<^>)/M > X{H)/M, 

and therefore ($|n|$) < 1 — X{H)/M. Taking into account Eq. (|2TI ) and the soundness condition from 
LemmaHone gets ($|n|$) < 1 - (2/3) 6M-^{L + 1)-^ = 1 - n~'^(i). Thus stoquastic 6-SAT defined 
by Eq. (|22l) obeys both the completeness and soundness conditions. 



A. 4 Proofs of lemmas in Section IH 



Proof of Lemma^ By definition, H = J2s^s where Hs is a stoquastic Hamiltonian acting on qubits 
from a set 5, |5| < k. By adding the identity factors we can assume that every term Hs acts on a subset of 
exactly k qubits. Applying a shift H ^ H + [3 necessary, we can assume that all matrix elements of 
Hs are non-positive (for all S). 

Any A;-qubit Hermitian operator R with non-positive matrix elements can be written as 



^ = \Y. Rx,y{\x){y\ + \y){x\), 



Rx,y < 0. 



Clearly, for any string x G S'^ one can construct a quantum circuit with X gates such that |x) = U \^^). 
Analogously, for any pair of strings x ^ y ^ T;^ one can construct a quantum circuit Ux,y with X and 
CNOT gates such that \x) = U^^y \y) = |10^"i). Thus we get 



R=Y.Rx,xU,,{\Q){<d\^^)ul + ]^ J2 R.,yU.,y{x^\0){0\'^-') 



x<^& 



'~'x,y 



Here Ux and Ux^y are quantum circuits on k qubits with X and CNOT gates. Applying this decomposition 
to every term Hs separately, and normalizing the coefficients, we arrive at Eq. (ITOl ). □ 

Proof of Lemma\3l Let us first prove Eq. (fTTI ). The key idea is illustrated in Figure |2] If A; = 1 one can 

— = \oHo\ 
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l+> 



— i 


1 1 
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: — 
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|0>- 

l+>- 



-iol \o) — 4 
-(+1 



-(ol 



choose = T[l,3;2] 

target qubit 2, that is 



Figure 2: How to simulate measurement of |0) (0| by measurement of X. 

|0) (8) |+), where T[l, 3; 2] is the Toffoli gates with control qubits 1, 3 and 

r[l, 3; 2] |a, b, c) = \a,b(B ac, c). 



One can easily check that 

T[l, 3; 2] (/ / X) T[l, 3; 2]+ = CN0T[1; 2] ® X. 

Accordingly, {I(g)I(g)X) W = (O2I CN0T[1; 2] \02){+\X\+) = |0)(0|, see Figured For arbitrary A; one 
canuse A;copiesoftheancilla |0) and A; Toffoh gates, i.e., I?/;) = U'j=iT[j,2k+l; j+k] \tp)<^\0)'^'' (^1+) 
(all Toffoli gates in the product commute). The proof of Eq. ([T2l ) is the same except for not using the ancilla 
|+), i.e., W IV) = n.t! T[j, 2k-l;j + k-l] |V) \0)^'-\ □ 
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